PT-2013-5500 · Ibm+2 · Ibm Java Sdk+3

Published 2013-11-07 · Updated 2017-08-29 · CVE-2013-5375

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Java SDK versions 5.0.0 before SR16 FP4 IBM Java SDK versions 6.0.0 before SR15 IBM Java SDK versions 6.0.1 before SR7 IBM Java SDK versions 7.0.0 before SR6

Description The issue allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL. This could occur when untrusted code is executed under a security manager, or when the IBM SDK, Java Technology Edition has been associated with a web browser for running applets and Web Start applications, allowing code running under a security manager to access restricted classes.

Recommendations For IBM Java SDK version 5.0.0, update to SR16 FP4 or later. For IBM Java SDK version 6.0.0, update to SR15 or later. For IBM Java SDK version 6.0.1, update to SR7 or later. For IBM Java SDK version 7.0.0, update to SR6 or later.

Fix

Related Identifiers

CVE-2013-5375

RHSA-2013:1507

RHSA-2013:1508

RHSA-2013:1509

RHSA-2013:1793

RHSA-2013_1507

RHSA-2013_1508

RHSA-2013_1509

Affected Products

Ibm Aix

Ibm Java Sdk

Red Hat

Suse

References · 65

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV51089 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1507.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21655201 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21655202 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-1793.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-5375 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1509.html · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV51090 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-00361 · Security Note
• http://rhn.redhat.com/errata/RHSA-2013-1508.html · Vendor Advisory
• https://ibm.com/developerworks/java/jdk/alerts/#IBM_Security_Update_November_2013 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2013-5784 · Note
• https://access.redhat.com/security/cve/CVE-2013-5814 · Note
• https://access.redhat.com/security/cve/CVE-2013-5782 · Note